Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The API could be changed such that CreateTopicPolicy (and also AlterConfigPolicy) could have the principal passed as part of the validation request. This could possibly work but I think using the built in ACL mechanism that already exists seems like a better solution as this is really a permission issue that is trying to be solved. However, this approach While passing the principal to the policy could be used instead of if the community wants to go this routeit is not great as the ACL authorizer has all the information loaded to make permissions decisions and that still wouldn't be available to the create topic policy.